This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer File: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer (raw, json) Hash identifier: LDVI0UHkkw6VcBvq2iFB2rzVxsA1HeTIUT/mSOr5uTU= Subject key identifier: 07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8044553A01500CCBED55FDC7E97D83 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60592 IP: 91.207.188.0/23 IP: 185.28.192.0/22 IP: 185.38.108.0/22 IP: 185.82.212.0/22 IP: 2a00:a160::/29 IP: 2a00:fea0::/29 IP: 2a03:6920::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:44:55:3a:01:50:0c:cb:ed:55:fd:c7:e9:7d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=079889d9de4f07014beb2c0a312cd73652a3fc38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dd:f8:8a:16:ea:be:75:86:e7:c9:d4:59:82: 2a:69:98:02:1b:ab:73:d1:bb:b5:41:36:74:cb:9f: 7f:57:75:96:ba:12:6e:29:82:5e:a4:21:8b:2b:4d: 29:76:ea:6b:76:57:a6:19:9e:9e:e1:01:05:8f:0a: 55:db:aa:6f:41:6f:90:82:b4:23:6f:0a:19:43:a1: b5:57:2d:c5:94:35:2f:f8:9c:aa:28:15:f0:c4:b3: 9a:eb:4e:5d:20:1b:0c:e7:86:3c:56:0c:9c:01:75: 7e:89:62:67:37:78:70:1f:67:21:06:4c:94:35:b6: 97:1b:3b:d2:07:15:d3:e6:d1:e4:49:98:12:8d:6d: 06:51:2a:e1:6d:a6:80:90:44:a8:bc:08:96:1d:5e: 52:d7:1f:e9:63:61:9a:ac:7e:51:82:6b:29:8e:cb: 83:e2:34:5f:b8:9b:ee:ee:4f:0e:31:da:78:fc:4d: ea:9a:b9:b3:9b:b8:7e:e4:a2:a7:eb:f9:37:89:60: be:74:7c:b2:bd:1c:fd:2b:95:b9:6f:64:32:d2:92: 3b:17:39:6b:0c:26:cb:33:d4:6c:f1:f6:e0:4d:79: 88:cf:b7:cd:f3:17:35:9f:65:ba:61:e5:cd:24:7a: 99:83:0c:4f:d5:de:48:3f:e9:38:0a:02:30:37:c6: e1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.188.0/23 185.28.192.0/22 185.38.108.0/22 185.82.212.0/22 IPv6: 2a00:a160::/29 2a00:fea0::/29 2a03:6920::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60592 Signature Algorithm: sha256WithRSAEncryption 61:9d:f0:cf:33:af:ac:1f:17:d8:c3:0c:02:37:25:42:ad:7a: a4:72:c4:ff:8c:33:74:6a:38:76:a4:e1:67:98:07:f7:2f:b7: af:7f:49:4d:a5:25:03:98:95:3a:67:b0:3d:ed:7b:2f:b5:f8: 3d:8a:1e:e5:48:39:c3:31:af:6b:89:fd:78:2f:42:8a:d2:c1: a2:c9:6b:d7:c6:7d:d7:10:73:8d:bc:b1:5c:b6:16:58:0e:7e: a7:2e:13:1e:c4:d7:ac:90:cc:93:9f:ad:04:f2:eb:fa:a3:4f: ad:c8:56:d7:fc:b8:ce:9c:fa:10:39:06:77:e4:63:58:1b:ba: 4a:4b:fe:fd:b6:fb:fd:af:8b:ce:a1:7b:06:bd:b6:f8:f2:ed: da:e8:ef:71:68:57:93:f7:36:e9:12:1a:e9:df:21:b5:f6:14: 42:64:9f:fa:dc:ef:29:ef:fb:3d:a5:a7:93:c2:6f:a2:79:85: ec:0e:b2:bd:46:c9:99:78:fe:bd:8f:4c:6a:6d:6c:da:2f:9e: 1a:b7:bd:7a:09:2f:43:58:91:c4:09:57:16:da:a2:d9:d2:75: e4:42:ec:f8:28:03:21:ba:7e:53:78:87:b9:4f:fe:a0:f6:69: ab:67:a1:e2:d8:28:29:84:19:e5:80:3f:dc:a4:e3:90:81:da: 70:8d:97:81 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgISAZt8gERVOgFQDMvtVf3H6X2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzk4ODlkOWRlNGYwNzAxNGJlYjJjMGEzMTJjZDczNjUyYTNmYzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd34ihbqvnWG58nUWYIqaZgCG6tz 0bu1QTZ0y59/V3WWuhJuKYJepCGLK00pduprdlemGZ6e4QEFjwpV26pvQW+QgrQj bwoZQ6G1Vy3FlDUv+JyqKBXwxLOa605dIBsM54Y8VgycAXV+iWJnN3hwH2chBkyU NbaXGzvSBxXT5tHkSZgSjW0GUSrhbaaAkESovAiWHV5S1x/pY2GarH5RgmspjsuD 4jRfuJvu7k8OMdp4/E3qmrmzm7h+5KKn6/k3iWC+dHyyvRz9K5W5b2Qy0pI7Fzlr DCbLM9Rs8fbgTXmIz7fN8xc1n2W6YeXNJHqZgwxP1d5IP+k4CgIwN8bhWQIDAQAB o4ICzzCCAsswHQYDVR0OBBYEFAeYidneTwcBS+ssCjEs1zZSo/w4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1L2RkMzk0 MC1mZmQ2LTRiNjktOWYwMS1mZDhkMjVhMjYzZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvZGQzOTQw LWZmZDYtNGI2OS05ZjAxLWZkOGQyNWEyNjNkMi8xL0I1aUoyZDVQQndGTDZ5d0tN U3pYTmxLal9EZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAeBAIAATAYAwQBW8+8AwQCuRzAAwQCuSZsAwQCuVLUMBsEAgAC MBUDBQMqAKFgAwUDKgD+oAMFAyoDaSAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AOywMA0GCSqGSIb3DQEBCwUAA4IBAQBhnfDPM6+sHxfYwwwCNyVCrXqkcsT/jDN0 ajh2pOFnmAf3L7evf0lNpSUDmJU6Z7A97Xsvtfg9ih7lSDnDMa9rif14L0KK0sGi yWvXxn3XEHONvLFcthZYDn6nLhMexNeskMyTn60E8uv6o0+tyFbX/LjOnPoQOQZ3 5GNYG7pKS/79tvv9r4vOoXsGvbb48u3a6O9xaFeT9zbpEhrp3yG19hRCZJ/63O8p 7/s9paeTwm+ieYXsDrK9RsmZeP69j0xqbWzaL54at716CS9DWJHECVcW2qLZ0nXk Quz4KAMhun5TeIe5T/6g9mmrZ6Hi2CgphBnlgD/cpOOQgdpwjZeB -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:24 2026 by rpki-client